Flow roles and permissions

This page lists the IAM roles and permissions for Flow. To search through all roles and permissions, see the role and permission index.

Flow roles

Role Permissions

(roles/flow.admin)

Full access to all Flow resources. Intended for project administrators.

resourcemanager.projects.get

resourcemanager.projects.list

(roles/flow.editor)

Create and manage Flow generated media. Intended for content creators.

resourcemanager.projects.get

resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

(roles/aisandbox.serviceAgent)

Grants FlowService Service Agent permissions to manage resources in the consumer project.

aiplatform.endpoints.predict

aiplatform.interactions.create

aiplatform.interactions.get

logging.logEntries.create

logging.logEntries.route

serviceusage.services.use

(roles/flow.serviceAgent)

Grants Flow Service Agent permissions to manage resources in the consumer project.

aiplatform.endpoints.predict

aiplatform.interactions.create

aiplatform.interactions.get

logging.logEntries.create

logging.logEntries.route

serviceusage.services.use

Flow permissions

There are no IAM permissions for this service.